{"id":"GHSA-6r5x-hmgg-7h53","summary":"Remote code execution in Handlebars.js","details":"Handlebars.js before 4.1.0 has Remote Code Execution (RCE)","modified":"2019-12-20T02:08:50Z","published":"2019-07-15T19:46:01Z","withdrawn":"2019-07-15T19:46:01Z","database_specific":{"nvd_published_at":null,"cwe_ids":[],"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2019-07-03T20:19:30Z"},"references":[{"type":"WEB","url":"https://github.com/wycats/handlebars.js/issues/1267#issue-187151586"},{"type":"WEB","url":"https://github.com/wycats/handlebars.js/commit/edc6220d51139b32c28e51641fadad59a543ae57"}],"affected":[{"package":{"name":"handlebars","ecosystem":"npm","purl":"pkg:npm/handlebars"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/07/GHSA-6r5x-hmgg-7h53/GHSA-6r5x-hmgg-7h53.json"}}],"schema_version":"1.9.0"}